Impronta.
The most advanced counterintelligence system in the world.
Prevent, attribute, search.
Impronta operates on three mutually reinforcing levels: it deters theft before it happens, it turns every copy into evidence when a leak resurfaces, and it seeks out exfiltrated copies wherever they reappear.
Whoever photographs the screen gives themselves away.
The document on screen carries an invisible mark that survives even a photograph of the screen: the photo itself bears the signature of the copy. Separately, a proprietary algorithm analyses session behaviour and recognises when someone is photographing the screen, with no need for cameras, which are prohibited in classified areas.
Every printed copy remains identifiable.
The marking lives on several layers of the page: it survives photocopies, photographs and cuttings, and continues to reveal which copy it came from.
Even if the document is transcribed by hand, word for word.
When someone transcribes the document by hand, the copy still carries with it the identity of the original it was taken from.
The exfiltrated copy reports itself.
If the file is opened from a workstation not authorised by the organisation, the agency's security centre or the company's SOC receives an immediate alert: to whom that copy was assigned, from which workstation it was opened and, where possible, from which location.
The mark never contains a name.
Inside the mark there is only an opaque numerical identifier. The correspondence between that number and the person is held in a separate register with controlled access, and every consultation of the register is logged.
Whoever intercepts the mark does not find a person: they find a number that only the organisation, under the conditions the organisation itself has set, can resolve.
Authorised electronic release.
Every electronic copy knows the workstations on which it is permitted to open. When it is opened outside the authorised perimeter, the system immediately notifies the organisation's security office of three elements. The notification reaches a collection point chosen and managed by the organisation, never a server belonging to Oltre, and concerns copies released to connected networks: the system installation and the correspondence register remain within the organisation's network.
The copy
Which copy was opened, and who it was assigned to.
The origin
The IP address from which the copy was opened.
The location
An approximate location of the workstation where it was opened.
Labelling standard
NATO standard labelling
STANAG 4774 / 4778
OLTRE IMPRONTA implements the NATO classification labelling standard. Every sensitive document carries a STANAG 4774 confidentiality label, cryptographically bound to its content through STANAG 4778 metadata binding.
Built for classified networks, with no connection to the outside world.
Impronta is designed for environments in which the confidentiality of the infrastructure matters as much as that of the documents.
Designed for those entrusted with secrets.
Impronta was designed for those who handle information that must not leave the organisation, in the public and private sectors alike.
Defence and institutions
Organisations that handle classified information, where every copy in circulation is a liability and a potential breach.
Industry
Companies that must protect intellectual property, designs and strategic data, inside and outside the corporate perimeter.